
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31f4e496-6a37-36f1-a55c-8bab4cf47caa.roa
File: 31f4e496-6a37-36f1-a55c-8bab4cf47caa.roa (raw, json)
Hash identifier: mZt170A2a2ivmjNHSYkixq/2JEeMRuIhr5PV5gmPW2c=
Subject key identifier: 3D:86:49:C4:5F:4A:43:B4:F3:BC:B0:EA:62:83:47:71:CE:E7:EC:F9
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F4278154123F70345C4F0DB60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31f4e496-6a37-36f1-a55c-8bab4cf47caa.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 22773
IP address blocks: 72.208.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:15:41:23:f7:03:45:c4:f0:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=03e61995-a6ac-41f2-85cc-a74e20c3c10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:7c:7b:b6:68:7b:78:73:89:c2:cc:5c:a9:
6a:e3:cb:da:4d:6a:8d:86:5e:a0:ef:23:31:c8:2e:
7f:95:81:c1:7a:84:50:fc:b8:86:d8:fd:10:a9:9c:
d4:01:08:ed:89:12:c0:79:8e:e1:68:2f:f7:b3:5f:
29:01:cd:6f:0d:6b:8e:60:e2:1c:22:3e:6d:a4:2c:
66:b9:54:4b:21:8a:1b:7f:b9:cd:25:e3:e8:a8:2b:
0c:91:87:b0:62:12:80:0e:bb:07:a5:2b:62:18:3d:
07:50:49:77:19:70:59:55:dc:b7:87:7f:4b:38:66:
44:6e:45:a3:98:6e:0c:61:7c:c3:1b:5a:4b:69:a6:
d9:ad:97:8b:96:c0:ae:df:4b:61:1a:95:ae:ba:9c:
d6:29:da:e4:64:5b:e6:02:89:82:89:ad:ef:b4:7b:
78:74:a2:60:1a:6f:99:3f:0f:41:1c:c5:95:87:92:
02:47:ab:87:25:9d:f7:5a:24:20:ae:20:3d:de:47:
31:5b:05:08:78:7b:31:5a:58:f3:75:7c:06:8a:59:
15:f0:1b:d3:8e:1a:0e:38:50:64:af:27:64:98:5d:
2d:21:65:87:53:ff:6b:ed:64:06:0e:06:55:73:29:
7f:83:dd:6a:73:6e:57:a7:1e:6d:c5:26:20:6f:26:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:86:49:C4:5F:4A:43:B4:F3:BC:B0:EA:62:83:47:71:CE:E7:EC:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31f4e496-6a37-36f1-a55c-8bab4cf47caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:18:01:97:7f:dd:39:12:71:13:43:80:c7:31:d0:3c:dc:fe:
f7:3c:22:48:9f:f9:f2:8e:08:1f:07:2c:f2:dc:fc:96:f6:c6:
bc:4f:64:a9:cc:8e:c3:76:e5:79:f5:73:10:19:d4:b7:6e:7a:
84:8a:e3:f6:fb:41:88:24:7b:c2:00:35:eb:f5:63:20:94:fb:
9d:2f:10:14:44:bd:f7:0a:72:29:d6:8a:8f:2e:15:fe:30:f4:
eb:7c:e5:28:3f:ea:00:2b:f0:f0:5a:54:89:47:37:92:71:6b:
8c:d8:7a:56:56:e4:1a:03:d4:57:0b:48:e3:d9:e1:f6:ac:5a:
f6:3e:1d:4e:5c:df:05:21:27:21:76:b4:6c:ea:7a:6e:dc:9b:
9b:cf:28:f8:8f:af:7f:f0:6a:ea:2d:49:2c:1b:ae:82:94:ad:
a4:2e:37:f6:15:a0:b3:c0:3c:10:e1:53:38:5d:87:a1:b3:d2:
1d:ed:f5:25:c9:ac:76:ec:dd:cf:66:66:40:dc:bf:f4:9e:50:
06:58:48:b4:2f:6d:97:d5:e6:ff:9f:e1:c5:39:08:58:e4:06:
c5:76:60:1e:17:ee:b3:09:b4:d7:56:df:bd:b6:8d:da:77:99:
06:26:88:dc:d2:29:c8:47:c9:45:bb:87:8f:d2:fa:80:66:1c:
7f:ca:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:07:26 2026 by rpki-client